Description

A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.

Remediation

References

CVE-2021-35413

Related Vulnerabilities

WordPress Plugin Ultimate WordPress Auction Cross-Site Request Forgery (1.0.0)

e107 Other Vulnerability (CVE-2010-2098)

WordPress Plugin Easy Registration Forms Cross-Site Scripting (2.1.1)

MySQL CVE-2017-3450 Vulnerability (CVE-2017-3450)

Oracle Application Server Other Vulnerability (CVE-2002-1631)

Severity

High

Classification

CVE-2021-35413 CWE-707

Tags

Missing Update Known Vulnerabilities